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Abstract 

The paper gives a short introduction to mutually unbiased bases and the Welch bounds 
and demonstrates that the latter is a good technical tool to explore the former. In particular, a 
criterion for a system of vectors to satisfy the Welch bounds with equality is given and applied 
for the case of MUBs. This yields a necessary and sufficient condition on a set of orthonormal 
bases to form a complete system of MUBs. 

This condition takes an especially elegant form in the case of homogeneous systems of 
MUBs. We express some known constructions of MUBs in this form. Also it is shown how 
recently obtained results binding MUBs and some combinatorial structures (such as perfect 
nonlinear functions and relative difference sets) naturally follow from this criterion. 

Some directions for proving non-existence results are sketched as well. 

1 Mutually Unbiased Bases 

The current research originated in the problem of constructing a complete set of mutually unbiased 
bases and is inspired mostly by [22] . 

A set of mutually unbiased bases (MUBs) in the Hilbert space C" is defined as a set of or- 
thonormal bases {Bo,Bi, . . . ,Br} of the space such that the absolute value of a scalar product 
is equal to for any two vectors x £ Bi, y £ Bj with i ^ j. For the sake of brevity we 
will further call the absolute value of a scalar product of two vectors as the angle between these 
vectors. We will often group vectors of a basis into a matrix and say that two unitary matrices 
are mutually unbiased iff the bases obtained from their columns arc. Bases with such properties 
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were first observed by Schwinger in [55]. The name of mutually unbiased bases is due to Fields 
and Wootters [33| . 




The applications of MUBs include quantum state determination [211133] . quantum cryptography 
(the protocol BB84 due to Bennet and Brassard [5] is a classical example of such a usage), the 
Mean King's problem [T] and Wigner functions [33]. A good source of an up-to-date information 
on MUBs can be found on [O] , 

Clearly, if n = 1 then one unit vector (in fact scalar) repeated necessary amount of times gives 
a set of MUBs of any size. This result does not seem extremely useful, so we will further assume 
the dimension of the space n is at least 2. In this case it can be proved that the number of bases 
in any set of MUBs in C" doesn't exceed n-\- 1 (see Theorem [3] later in the text). A set of bases 
that achieves this bound is called a complete set of MUBs. An interesting question is whether such 
a set exists for any given dimension n. The answer is positive if n is a prime power [21[ I33| . The 
corresponding constructions are listed in section [9] of this paper. In all other cases (even for n = 6) 
the question is still open, despite a considerable effort spent on solving this problem (see, e.g., [5)- 

The search for complete systems of MUBs is complicated because of the number of bases we 
should find and because of the non-obviousness of the value of the angle Using the Welch 
bounds (described in the next section) we give a sufficient and necessary condition that uses solely 
orthogonality of vectors. Clearly, it is a much more studied and intuitive relation. 

This is not the first attempt to substitute the angle by zero. An alternative approach 
appears in the classical paper [33j : 

Proposition 1 Consider the operation that maps a state \x) S C" to the corresponding traceless 
density matrix = |a;)(a:| — I/n. Then \{x\y)\ = if and only if matrices and Yy are 

orthogonal with respect to the trace inner product: Tr{Y^Yy) = 0. 

In particular, applications of MUBs in quantum state tomography are based on this observation. 

Our approach is slightly different. From the collection of rt + 1 orthonormal bases in C", 
pretending to be mutually unbiased, we extract n flat (with all entries having the same absolute 
value) vectors, each in C" . Next, from each pair of these vectors we obtain a new vector from the 
same space. We prove that the bases of the original collection are MUBs if and only if the latter 
vectors are pairwise orthogonal. It is not a problem to find (2) orthogonal fiat vectors in C" , but, 
in general, they won't be decomposable back to pairs. 

Moreover, if we restrict our attention to homogeneous systems of MUBs (see section |6] for the 
definition), it is possible to reduce the criterion to only two matrices from C" and orthogonality 
conditions obtained in a similar fashion. In order to show the usability of our result we show how 
it sheds light on the known constructions of complete sets of MUBs. In particular, we give a bit 
easier proofs that these constructions do result in complete sets of MUBs. 

We also show how this approach naturally leads to some applications of combinatorial structures 
to MUBs that were obtained recently. In particular, we extend the correspondence between planar 
functions and splitting semiregular relative difference sets to the case of non-splitting ones. 

2 Welch bounds and Crosscorrelation 

Welch bounds are the inequalities from the following theorem: 
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Theorem 2 For any finite sequence {xi} of vectors in Hilbert space C" and any integer k > 1 the 
following inequality holds: 



The proof will be given in section 21 but for now let us note that these inequalities were first 
derived (in the case of all vectors having the same norm) by Welch in [32]. It is worth to become 
acquainted with his motivation. 

In order to do this we should define sequences with low correlation. For a systematic treatment 
of the topic see |18j . Let u and v be complex periodic sequences of equal period n. Usually the 
sequences are defined as Ui — o;^* with from Z„. (lj„ is a primitive n-th power root of unity: 
i^n = , Z„ is the ring of integers modulo n). The binary case (with n = 2) is the most common. 
The (periodic) correlation of u and v is defined as (where L stands for the left cyclic shift function) 



The correlation of a sequence with itself is called its autocorrelation 0u(t) — {L'^(u)\u). The 
correlation of two shift-distinct sequences is usually called cross correlation. 

Informally, the correlation of binary sequences characterizes the number of places two sequences 
coincide minus the number of places they differ. For random sequences magnitude of this value is 
small, so it can be used as a measure of the pseudorandomness of a sequence. The correlation is 
called ideal if it is as small as possible (0 or ±1). It is considered low, if it is 0{^\/n) (an expected 
value for random sequences). For example, m-sequences (the maximal length sequences generated 
by a linear feedback shift register (LFSR)) have ideal autocorrelation, since for them 9{t) = —1 for 
any r ^ (mod n). This, among other properties, explains why they are used in cryptography (as 
a main building block of nearly every stream cipher) and electronic engineering (e.g., in radars). 

Families of sequences with low crosscorrelation are also well-studied. A nice property of these 
sequences is that they can be transmitted through the same channel simultaneously without mutual 
disturbance. By the time Welch was writing his paper there were some good families of sequences 
with low auto- and cross-correlation and he got interested in obtaining upper bounds on the number 
of sequences in a family. 

For example, one classical family of sequences was proposed by Gold in |15j . For any integer n 
he constructed a family of 2" -|- 1 binary sequences of period 2" — 1 and correlation between any 
two of them takes only three possible values: — 1, — (2^"+^)/^ -t- 1) and 2^"+^^/^ — 1. 

Similarity of this family and a complete family of MUBs is apparent. Both are built of vectors 
from C", vectors are joined in blocks of size n, the number of blocks is approximately the same 
and the ratios of possible inner products and norms of vectors also almost agree. So, an attempt 
to apply Welch bounds to the problem of MUBs seems quite reasonable. 

Even more, it turns out that AUtop in his work [5] of 1980 (i.e., one year before the work [21j of 
Ivanovic) for any prime p > 5 gave a set of p sequences with period p and elements with absolute 
value -y= , such that the crosscorrelation is given by 




(1) 



n 
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Clearly, these sequences with different shifts and the standard basis give a complete set of MUBs 
in C. This result was generalized to prime power dimensions in [23]. 



3 Link between MUBs and the Welch Bounds 

In our first application of the Welch bounds to MUBs we can apply the original approach of Welch 
in the new settings. It is easy to check that a union of orthonormal bases satisfy the Welch bound 
for fc = 1 (it can be done either directly using ([1]) or using Theorem [5] further in the text). So, we 
should use k — 2. 

Theorem 3 If n > 2 then the maximal number of mutually unbiased bases in C" does not exceed 
n + 1. 

Proof. Suppose we have a system of n + 2 MUBs. Join all vectors of the system into one 
big sequence {xi} of size n{n + 2). Let us fix fc = 2 and calculate the left hand side of ([1]). We 
have n{n + 2) vectors, each giving the scalar product 1 with itself and n{n + 1) scalar products of 
absolute value with vectors from other bases. Summing up, we have: 



For the right hand side we have: 



n{n + 2) { l + n{n + l)- 4j 



n(n + l)(n + 2)(2n+l) 



n{n + l){n + 2){2n+l) 



in a contradiction with the Welch bound for k = 2. 



Originally it was proved in [33j using the result of Proposition [T] 

If we reduce the number of MUBs from n + 2 to n + 1 we don't get an apparent contradiction. 
However, even in this case the Welch bounds prove themselves to be useful. Klappenecker and 
Rotteler seem to be the first ones to realize this by proving the 'only if part of the following 
theorem in [5^. The 'if part seems first to appear later, in [27] . 

Theorem 4 Let {Bi} be a set of n + 1 orthonormal bases in an n-dimensional Hilbert space and X 
be the union of these bases ( that is the sequence of vectors, each of them appearing in the sequence 
the same number of times it appears in the bases). Then X satisfies the Welch bound for k — 2 
with equality if and only if {Bi} form a complete system of MUBs. 

Proof. If {Bi} is a complete system of MUBs and X = {xi} is the union of its bases, then 
calculations similar to ones in the proof of Theorem [3] show 



+ 1) ( 1 + • 4j 
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and 




And vice versa, suppose X, being a union of orthonormal bases, attains the Welch bound for 
k ^ 2. Then, = 1 for each x in X, \{x\y)\'^ = for two different vectors of the same basis, 

and by the inequahty between square and arithmetic means we get: 

xeBi \xeBi 

for any vector y of unit length. To attain the Welch bound, this inequality must actually be an 
equality, which is achieved only if has the same value for all vectors x from B^. This means 

that bases {Bi} form a complete system of MUBs. ■ 

Systems of vectors attaining the Welch bounds have been investigated before. A system of 
complex vectors from C" attaining the Welch bounds for all k < t is called a complex projective 
t-design. This is a Chebyshev-type averaging set on the n-dimensional complex unit sphere CS'"""'^, 
in the sense that the integral of every polynomial of degree <t\s equal to the average of its values 
on the vectors from the i-design. See [35] for more details. 

We give a criterion for attaining the Welch bounds in the next section. 




4 Criterion for Attaining the Welch Bounds 

Let us at first define the Schur product of two matrices. Let A = (ay ) and B = {bij) be two 
matrices of equal sizes. The Schur product (see, for example, chapter 7 of [19j ) is the matrix of the 
same size (denoted by j4 o _B) with its (z, j)-entry equal to Oijbij. In other words, multiplication is 
performed component-wise. The k-th Schur power of the matrix A is again the matrix of the same 
size (denoted by A^^^) with its (i, j)-entry equal to a*j. 

Additionally, we shall use notation A'' for the adjoint matrix (complex conjugated and trans- 
posed) and the term self-adjoint for matrices A satisfying A'' — A (also called Hermitian). 

We will at first give a proof of the Welch bounds and then extract the equality criterion from 
the proof. 

Proof of Theorem\^ Let us construct the Gram matrix G ~ (oij) with Oij ~ {xi\xj) and 
consider its fc-th Schur power G'-'^' (with k being a positive integer). The square of its Euclidean 
norm (see chapter 5 of [19] , also known as Frobenius norm and Schur norm) is defined by 

(||GW||^)'^^|(^^|^^.)|2fe^ (2) 

Unitary operators, applied both from the left and the right, do not change the Euclidean norm of 
a matrix. Any self-adjoint matrix can be transformed into a diagonal matrix with real entries (its 
eigenvalues) on the diagonal by a unitary transformation, and G^''^ is a self-adjoint matrix, hence 

= E (3) 

Aeo-(G(*^)) 
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here a is the spectrum (the raultiset of the eigenvalues of a matrix). By the inequahty between 
square and arithmetic means, we have (let us remind that the rank of a self-adjoint matrix is equal 
to the number of its non-zero eigenvalues): 

The last estimation on the rank of G'^^^ we will prove later. ■ 

Theorem 5 Let B be a matrix and X C C" be the sequence of its columns. Let wi,W2, ■ ■ ■ ,Wn 
be the rows of the matrix. Then X attains the Welch bound for a fixed k if and only if all vectors 
from 

W=\J(, ^ , )w^^'^ o o . . . o wi^"'^ I h e No,A:i + fc2 + • • • + fc„ = fc I 



are of equal length and pairwise orthogonal. 

In other words, each vector of is a Schur product of a fc-multiset of rows of B with a 
coefficient that is the square root of the multinomial coefficient of the multiset 

fc \ kl 



ki,...,knj /ci!fc2! • • • fc„! ' 

Proof. At first, let us note that matrix G in ([21) is equal to B^ B. So (if each Wi is treated as 
a row vector) : 

G — w\wi -\- w\w2 ■ ■ ■ + w\wn- 

By the formula for a power of a sum, we obtain 



fcl+fe2+---+fe,i=fc 



In other words, G*^*^-* — G^G, where the rows of G arc exactly the vectors from W . This gives 
the bound on the rank of G'-'^-' used in formula ^ , because the number of fc- multisets of an n-sei 
equals ("+^"^) (see, e.g., section 1.2 of 

By observing the inequality between ([3]) and ([4]), we see that X satisfies the Welch bound 
for a fixed fc with equality if and only if G^^^ has ("^^~^) equal non-zero eigenvalues (all other 
eigenvalues are automatically zeros due to the rank observations). 

It is a well-known fact that for any matrices P and Q the set of non-zero eigenvalues of matrices 
PQ and QP are equal whenever these two products are defined (see section 1.3 of [Hj). Hence, 
GGt have ("+^"^) equal non-zero eigenvalues, and because it is a self-adjoint matrix of the same 
size it is a scalar multiple of the identity matrix. And the latter is equivalent to the requirement 
on the set W . ■ 

We haven't hitherto seen the pair of theorems [2] and [5] appearing in such a general form, however 
all ideas involved in the proof have already appeared in the proofs of other results. As we have 
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already said, Welch was the first who derived the bounds (P) in the case when all vectors have unit 
norm and k is arbitrary. It was done in [32] . The variant of theorem [5l with k — 1 and all vectors 
of equal length, seems first to appear in [M]. Our proof is a generalization of an elegant proof 
found in [3T]. In the latter paper the Welch bounds are stated in the case of vectors of different 
length, but it deals with the case of A: = 1 only. 

5 Application of the Criterion to MUBs 

At first let us state the following easy consequence of theorem [H 

Corollary 6 Let B be a matrix and X C C" be the sequence of its columns. Let wi,W2^ ■ ■ ■ , w„ 
be the rows of the matrix. Then X satisfy the Welch bound for k — 2 with equality if and only 
if all vectors from W — {w^''} U {\/2wi ° Wj \ 1 < i < j < n} are of equal length and pairwise 
orthogonal. 

Suppose we have a complete system of MUBs: {i?Oi Bi, . . . , i3„}. We can always represent them 
in the first basis Bq, thus we can assume that the first basis is the standard basis (the identity 
matrix) . Then the matrices representing all other bases have all their entries equal by the absolute 
value to -k=. 

V" 

A matrix with complex entries and with all entries having the same absolute value is called a 
fiat matrix. If it is additionally unitary, it is called a complex Hadamard matrix. It is common 
to rescale flat matrices in such a way that each its element has absolute value 1. We will usually 
assume that. In the case of an n x n complex Hadamard matrix it is sometimes more convenient 
to assume each element having absolute value sometimes 1. According to the situation we will 
use both assumptions, it will be usually clear from the context what is meant. 

Complex Hadamard matrix is a generalization of classical Hadamard matrix that satisfies the 
same requirements, but with all entries real (i.e., ±1) (see, for example, section 1.9 of [3]). We will 
further use term Hadamard matrix or just Hadamard to denote complex Hadamard matrices. 

Two Hadamard matrices are called equivalent if one can be got from the other using row and 
column multiplications by a scalar and its permutations. Some classes of equivalent Hadamards 
are classified. See [30] for more details. 

A system of Hadamards such that any two are mutually unbiased is called a system of mutually 
unbiased Hadamards or MUHs for short. The following result is obvious 

Proposition 7 A complete system of MUBs exists in space C" if and only if there is a system of 
n MUHs in the same space. 

A system of n MUHs in C" is called a complete system of MUHs. We will turn to the investigation 
of complete systems of MUHs in the remaining part of the paper. 
Now we are able to prove the following theorem: 

Theorem 8 Let {Bi\ (i — 1,2 ... ,n) be a set of n Hadamards in C" and B be a concatenation 
of these matrices (i.e. a x n-matrix having as columns all columns appearing in {Bi}). Then 
{Bi} form a complete set of MUHs if and only if all vectors from W — {wi ° Wj \ I < i < j < n} 
are pairwise orthogonal, where {wi} are the rows of B. 
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Proof. Let us denote the n x n identity matrix by Bq. By Theorem 31 we see that the set 
{Bq, Bi, . . . , Bn} is a complete set of MUBs if and only if the set of columns of all these matrices 
attains the Welch bound for fc = 2. Now from Corollary [S] it follows that it only remains to show 
that vectors from W, as it was defined in CoroUarylHl are of equal length and orthogonal if vectors 
of W are orthogonal. 

If a vector from W is multiplied by itself using the Schur product, the result has one 1 and 
all other entries equal to in the part corresponding to i?o, and all entries in other parts by the 

absolute value are equal to i. Hence, the length of the vector is + n?^ = V2- 

If two distinct vectors are multiplied, the result has only zeroes in the first part, and its length 

is ^'n?-^ = 1. We see that all vectors from W have the same length. 

Moreover, the part of Bq contributes zero to the inner product of 2 distinct vectors of W , hence 

vectors of W are orthogonal if and only if the corresponding vectors of W are. ■ 

Let us restate the last theorem. Suppose _B is a flat n x n-matrix. Construct the weighted 
graph K{B) as follows. Its vertices are all multisets of size 2 from {1, n}. Semantically a vertex 
{i, j} represents the Schur product of the i-th and the j-th row of B. The weight of an edge is the 
inner product of the vertices it joins. (Of course, thus defined, the weight depends on the order of 
the vertices, but let us fix a direction of each edge, say lexicographical). Then theorem [H] can be 
restated by saying that Hadamards Bi, . . . , Bn form a set of MUHs in C" if and only if the sum 
of weights of each edge in all of K{Bi), . . . , K{Bn) equals 0. In fact, there is no need to consider 
edges between vertices that have an element in common, since they will be orthogonal. 

It does not seem that this restatement makes the problem much easier comparing to the initial 
formulation. However, careful examination of the possible configurations of weights that can be 
achieved in K{B) may shed some light on the problem. In the next section we consider a special 
case of systems of MUHs for which Theorem [8] yields a considerable simplification. 



6 Homogeneous Systems of MUBs 

Suppose we have a flat n x n-matrix A = {oa.j) and an Hadamard matrix H — (hij) of the same 
dimensions. Consider the following system of Hadamards (it's assumed that each element of A 
and H has absolute value 1) 

= —i=ae^rhe,k (5) 



with r being a matrix index, k being a column index and £ being a row index (r,k,£ {I, . . . ,n}). 
In other words, the i-th matrix is given by diag{vi)H , where Vi is the i-th column of A. We will call 
such a set of Hadamards (in the case it forms a set of MUHs) a homogeneous system of MUHs., or a 
homogeneous system of MUBs if the identity matrix is appended. The name is borrowed from [4]. 
From theorem [8] it follows that the system from ([5]) forms a system of MUHs if and only if 



n ^ — ' 

r,k 
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for all £1,^2,4 and £4 such that {£i,£2} 7^ {^3,^4}. 

Let us define the L-graph (denoted L{A)) of a flat matrix A as follows. It is a suTiple graph 
with the same set of vertices as K{A). Two vertices are adjacent if and only if the corresponding 
vectors are orthogonal. The previous identity leads to the following observation: 

Proposition 9 The homogeneous system given by 0) is a complete system of MUHs if and only 
if the graphs L{A) and L{H) together cover the complete graph. 

If matrices A and H satisfy the conditions of Proposition [5] and A' and H' are such matrices 
that L{A) is a subgraph of L{A') and the same holds for L{H) and L{H'), then A' and H' also 
give rise to a complete system of MUHs via ([5]). Hence, without loss of generality we may consider 
only matrices with maximal L-graphs. We will call them L-maximal flat or Hadamard matrices, 
respectively. What are they? We can say little on the subject at the moment, it is a topic for a 
future research. 

Open Problem 10 Describe L-maximal fiat and Hadamard matrices and the corresponding graphs. 

An answer to this question would possibly allow a systematization of all complete homogeneous 
systems of MUBs. Anyway, it is already clear that L-maximal flat matrices cover L-maximal 
Hadamard matrices (because the latter is a special case of the former) . 

There is an important class of L-maximal Hadamard matrices. It is a very common example of 
Hadamard matrices and it is used in all known constructions of maximal families of MUBs. These 
are Fourier matrices which we will now introduce. 

7 Fourier Matrices 

Fourier matrix is the most popular type of Hadamard matrices. It is called so because it performs 
the Fourier transform of a finite Abelian group. Fourier transform is widely used in many areas 
of mathematics, physics and computer science. However, here we will be mostly interested in one 
simple property of Fourier matrices. Namely, the rows of the Fourier matrix of a group G with the 
Schur product operation form a group isomorphic to the group G (see later). 

Let us take an Abelian group G = Z^^ x Z^^ x • • • x of order n = did2 - ■ ■ dm- By the 
structure theorem for finite Abelian groups, each finite Abelian group is isomorphic to a group of 
this form (see, e.g., [17]). 

Later on we will be also interested in the group G — R^^ x R^^^ x • • • x R^^^ , where Rq is the 
group of real numbers modulo a with the addition operation. Note that Gi = G2 does not imply 
Gi = G2- Also, the group G is a subgroup of G. In addition to that we will use notation G* for 
the set of non-zero elements of G, and G* for the set of elements of G with at least one component 
being a non-zero integer. 

The Fourier transform usually is defined via the dual group which is formed of all the characters 
of the group. A character of an Abelian group is its morphism to the multiplicative group of unit- 
modulus complex number. It is possible to establish an isomorphism from G to G (the dual group) 



by 



m 



2' 




(6) 
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where a — (ai, a2, . . . , and b = (&i, 62, ... , 6m) are elements of G and Xq is the element of G 
correspondmg to a. Note that the expression Xa(b) is symmetric in a and b. We will also extend 
the definition ^ to any a and 6 in G. The following lemma is a classical result. 

Lemma 11 Let x be an element of G. Then ^ Xvi^) — ^ o^*^ only if x d G* . 
Proof. Let us write x = (xi, X2, ■ ■ ■ , Xm)- We have: 

m di-l 



n = n ^""p 

yeG i=l k=0 



2m 



Lemma follows from the fact that the roots of the equation ^ lo*^ 

k=0 

roots of unity exp{^^Xj), with Xj an integer, < Xj < dj. M 



in w are exactly the 



Corollary 12 The matrix F = (fij), indexed by the elements of G and with fij = Xj{i), is an 
Hadamard matrix. 

Proof. Clearly, all elements of the matrix have absolute value 1. The inner product of the 
rows indexed by a and b with a 7^ 6 is 

Xv{a)Xv{b) = ^ Xy(fo - a) = 0. 
yea yeG 

Hence, two distinct rows are orthogonal and the matrix F is Hadamard. I 

Matrix F from the last corollary is called the Fourier matrix of the group G. As an example, 
if we take G — T^n, we obtain the matrix 



/I 


1 


1 


1 






1 













1 \ 



with LLin — e^'^*/" . An arbitrary Fourier matrix is equal to a tensor product of such matrices. 

The Fourier matrix of the group G has some good properties. At first, it is symmetric. Next, let 
us denote by Ri the row that corresponds to the element i € G. It is easy to see that RioRj = Ri+j. 
So, the set of rows (the set of columns) forms a group, with the Schur multiplication as an operation, 
that it is isomorphic to the original group G. 

Remark. Note that the statement of Corollary [T^ holds in more general assumptions. Take 
any subset X C G of size |G| such that for any a,b G X with a ^ b we have a — 5 G G*. Then the 
matrix F = (fxj) {x G X, j G G), with f^j = Xji^)} is Hadamard. 

For example, if we take G = Z3 x Z2 and X = {(0, 0), (0, 1), (1, a), (1, 1 + a), (2, 6), (2, 1 + 6)} 
where < a, & < 1 are some reals, the we get a matrix equivalent to one in formula (4) of [4]. 
[Check!] 
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8 Fourier Matrices in Homogeneous Systems 



Let H be an Hadamard n x n-matrix. Denote its rows by i = 0, 1, . . . , n — 1. Rescaling of 

columns does not change the L-graph, so we may always assume that i?o consists only of ones. 

For a fixed i the set {Ri oRj | j = 0, . . . , n — 1} is an orthogonal basis of C" . Hence, any Ra o Ri, 
is not orthogonal to at least one of {Ri o Rj \ j — . . . ,n ~ 1}. If iJ is a Fourier matrix, then 
Ra o Rb is not orthogonal to exactly one of {Ri o Rj | j = 0, . . . , rt — 1}: the one with i + j = a + b. 

And conversely, if any Ra o Rb is not orthogonal to exactly one of {Rq ° Rj | J = 0, . . . , n — 1} 
then L{H) is isomorphic to the L-graph of a Fourier matrix. Indeed, let G be the set of directions 
(equivalence classes of collinear vectors) defined by rows of H with the Schur product operation. 
The set is finite, it is closed under the operation, Rq is the identity element, the operation is 
commutative and associative and for any fixed i the operation Rj i— s- Ri o Rj is a bijection. Hence, 
G is a finite Abelian group, and L{H) is isomorphic to the L-graph of the Fourier matrix of G. So, 
we have proved the following result 

Theorem 13 Fourier matrices are L-maximal Hadamard matrices. Moreover, their graphs have 
maximal possible number of edges. 

This result explains why Fourier matrices are so useful in the constructions of MUBs. It can 
be conjectured that Fourier matrices are the only L-maximal Hadamard matrices. 

Let G be a graph. Recall [10] that the independence number a{G) is the greatest number of 
vertices that are pairwise disjoint, conversely, the clique number uj{G) is the greatest number of 
vertices that are all pairwise connected. The minimal number of colours that can be assigned to 
the vertices of the graph in such a way that any two adjacent vertices are coloured in different 
colours, is called the chromatic number x(G) of the graph. It is easy to show that x(G) > (^(G). 

It seems worth to mention some constructions that are similar to the notion of L-graphs (i.e., 
when the adjacency relation on the set of vectors is generated using the orthogonality relation). 
One known to us example is Hadamard graph defined in [20j . The set of vertices of the Hadamard 
graph S{n) of order n is the set of all ±l-component vectors of length n, and two vectors are 
adjacent iff they are orthogonal. The famous Hadamard conjecture is equivalent to the statement 
that uj{S{An)) = An for any positive integer n. 

It is clear, that for any Hadamard matrix H acting on C" the clique number of L{H) is equal 
to n. If L{H) is a subgraph of the L-graph of a Fourier matrix, then x{L{H)) = n (the colour of 
a vertex is the corresponding element of the group). However, it is proved in [14j that there is an 
exponential gap between 4n and x(S'(4n)). So, it is quite possible that for some Hadamard matrix 
H we would have x(L(-B)) > n, and this matrix cannot be covered by a Fourier matrix. 

Another nice property of Fourier matrices (noted to be "striking" in [4]) is that any vector v, 
unbiased with respect both to the standard basis and a Fourier matrix, can be collected into a 
whole unbiased basis. It is easy to explain if one notices that a Fourier matrix F is symmetric and, 
hence, also its columns {Ri} form a group with the Schur multiplication as the operation. The 
vector V can be extended to a basis {Ra o v \ a Cz G}, and 



\{Rb\RaOv)\ = \{Rb-a\v)\ = 




As mentioned above, all known constructions of complete systems of MUBs are built from 
Fourier matrices. In the light of Proposition [5] it seems a good choice, since Fourier matrices are 
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L-maximal Hadamard matrices. Moreover, the L-graph of a Fourier matrix covers a fraction of 
roughly ^^^^ edges of the complete graph, so it remains to find a flat matrix (a more general notion) 
to cover the remaining fraction of - edges (a less number of edges). It seems that it should be 
easy, but it is not. 

Proposition 14 Let H be the Fourier matrix of a group G and A be a flat matrix with rows 
{Ri}i£G- The system defined by (0) is a complete set of MUHs if and only if for any non-zero 
A G G the matrix with rows from 

{R,+A o E^^^ U e G} 

is an Hadamard matrix. (Here r\ stands for the element-wise inverse of Ri. It is the Schur 
(-1 )-st power). 

Proof. Suppose we have a complete set of MUHs. It follows from Proposition [H] that 

V<7i , 52 , 53, 54 e G : ^^^^ = g ^^^^'^^ } =^ i?9, o i?9. ^ R9. ° R9. ■ (7) 
Clearly, each element of Z?a is of absolute value 1. Let us take 51 ^ 53- Then 

(i?3,+A o 47l)|i?<,3+A o 4;1)> = {R,,+A O Rg,\Rg,+A o 

Moreover, {gi + A) + ^3 = (53 + A) + 51, 53 ^ gi and 53 ^ ^3 + A. Using ^ with 52 = 53 + A 

and 54 = 51 + A, we have i?gi+A ° Rgi -L Rg2+A ° Rg2 ■ 
The proof of the converse statement is similar. ■ 

Note that Hadamard matrices are quite rare, and here from one flat matrix one should extract 
n — 1 Hadamards. It explains, to some extent, why it is not so easy to find a convenient matrix 
A. In practice, matrices Z?a are chosen to be (up to some equivalence) equal to the same Fourier 
matrix. Now we give three possible kinds of restrictions on Z?a and describe the corresponding 
constructions in terms of functions acting from one Abelian group into another. 

Suppose matrix H (as in ([5])) is the Fourier matrix of the group G = Zd-^ x Z^^ x • • • x Z^^ and 
let N = Zrf'^ X Zrf^ X • • • X Zrf/ ^ be the group of the same size. Suppose all matrices Da are equal 
(up to a permutation of rows) to the Fourier matrix F of N and each row of A (that we want to 
construct) is a row of F. Define the function / : G — > iV as assigning to the index of a row of A 
the index of the row of F that stands in this place. It is easy to see that this construction satisfies 
the condition of Proposition [9] if and only / satisfies 

V5i,52,53,54 e G : f ^g,-) + f ^Jl^^'J) + f^g^) } ^ {^i,^^} = {53,.94}. (8) 

This is not the most general case. If we allow Da to be equal to the matrix F with row 
permuted and each column multiplied by Xx{o-) where a is the index of the column and x is some 
element of N (that depends on A), then we can take the matrix A = (a^), {£ G G,r G N) defined 
by a^r — Xrifi^)), where function f : G ^ N satisfies 

V51, 52, 53, 54 e G : {f^, g^T^ {53^5!} } ^ ^^^'^ + ^^^'^ ^^^'"^ ' ^^^'^ ^ 
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Finally, from Lemma [TT] it follows that this approach gives a complete system of MUHs if and 
only a f : G ^ N satisfies 

V51, 52, 53, 54 e G : {g\^g^}^{g^'^gll } ^ fidi) + f {d^) " / (53 ) " f {9 e N*. (10) 

However, in this case matrices Z?a are not longer equivalent to a Fourier matrix, but rather to a 
matrix mentioned in the remark after Corollary [T2l 

Summing everything up, we have the following result: 

Theorem 15 Condition is more general than the one in (0) that, in its turn, is more general 
than the one in Formula 

(vl%^J-^,ii)^^(f(e)), (11) 

(with k,£ G and r ^ N ) gives a complete system of MUHs if and only if the function f : G N 
satisfies !ilO\) . 

A similar result appeared in [27j . We postpone a discussion of related topics to section [TOl 
In the next section we show classical constructions of complete systems of MUBs in the light of 
Theorem [121 



9 Known Constructions 

Now we will give two known examples of complete sets of MUBs in the terms of the previous 
corollary. 

Construction essentially corresponding to the following one was first obtained for GF{p) by 
Ivanovic in 21 and in the general case by Fields and Wootters in [33j . 

Lemma 16 If n — is a power of an odd prime, then the function f{x) — with G — N being 
the additive group of GF{n) (i.e. iJ^) satisfies (^i. 

Proof. Let us suppose gi + g2 = 53 + 54 and gl + gl = gl + gl- Then gi - = g^ - g2 
and {gi — gz){gi + 53) = (54 — 52)(54 + 52)- If 5i = 53, we are done. Otherwise, we can cancel 
51 — 53 out from the last equality and get 51+53 = 54 + 52 • Together with the first equality it 
gives 2(52 — 53) — 0. Because 2 does not divide n, 52 = 53 and we are done. ■ 

If n is even we have to be a bit more tricky. Let us remind, that the finite field GF{2^) 
consists of polynomials with degree smaller than k and coefficients from {0, 1}. All operations are 
performed modulo 2 and h, where h is an irreducible polynomial of degree k. We will treat these 
polynomials as integer polynomials. The next lemma also leads to the construction first obtained 
by Fields and Wootters in [33| . 

Lemma 17 Let G he the additive group of GF{2^). Then the function f : G G defined with 

/(a;) = y mod {2,h) 

satisfies (0) with N — G. 
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Proof. Suppose 51+52 = 93+94 (mod 2,h). Then (91+92)'^ = (53+54)^ (mod 2,h). Hence, 
91+ 92^ 93 ^ 94 = (mod 2,h). This means that 

/(51) + f{92) - f{93) - /(.94) = gi+g^'-g3-gl ^od (2, /i) 

is an integer polynomial. The only way it could not belong to iV* is if it was equal to 0. Let us 
suppose it is equal to zero and prove that in this case {31,32} — {_93t94S- 

Let us define s — {gi + 92) mod 2. Then also gl + = (mod 2). Consider the following 
equation in x: 

9l+9l--'^-{s-xf ^^^^^^^^^ 

2, 2_ 2 

Both gi and 92 are its roots. The polynomial of x can be rewritten as — — ^ — — + sx — x'^. One may 

2, 2_ 2 

notice that — — ^ — ~ integer polynomial, so taking it modulo h and 2 we obtain an equation 
of the second degree in GF{2'^): 



2 9I +92-s^ n 
X — sx = 0. 

If gi 7^ 52, no other element except them can satisfy it. If gi — 52 then s — and this equation has 
only one root, because a; i-^- is a bijection in GF{2^) (a Frobenius map). Thus, / satisfy ([9]). ■ 

The last two lemmas combine into the following well-known result: 
Theorem 18 If n is a prime power then there exists a complete set of MUBs in C". 



10 Related Combinatorial Structures 

Observing formulas (H]), ([9]) and (fTO|) one can conclude that they, especially ([8]), are of a highly 
combinatorial nature. It turns out that they indeed have a strong link with some well-studied 
combinatorial structures. 

Suppose G and N are Abelian groups with \G\ < \N\ < 00. Functions f : G N, for which 
the equation /(x + a) — f{x) = b has no more than 1 solution for all a.b £ G not equal to zero 
simultaneously, are called differentially 1-uniform [25]. If iV satisfies |G|/|A^| = m G N and function 
f : G N \s such that |{x e G | f{x + a) — f{x) = h}\ — m for any b E N and non-zero a G G, 
the latter is called perfect non-linear [7 . These functions are used in cryptography to construct 
S-boxes that are not vulnerable to differential cryptanalysis. 

If \G\ — \N\ as in ((8]), these two notions coincide and function / is sometimes called a planar 
function. This name is given because any planar function gives rise to an affine plane [9j. For 
functions satisfying ([9|) we will use name fractional planar. 

The following planar functions from GF{p^)^ with p odd, to itself are known: 

• f{x) = xP where a is a non-negative integer with fc/gcd(fc,Q;) being odd. See [9]. 

• f{x) — x^'^^+^^Z^ only for p = 3, a is odd, and gcd(fc, a) = 1. See |8]. 

• f{x) = x^^ — ux^ — v^x^ only for p = 3, fc is odd, and u is a non-zero element of GF{p^). 
The special case of u = —1 was obtained in [8j, the general case is due to [TT] . 
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The construction with f{x) = from the previous section is from the first class. 

Let K again be an Abehan group and be its subgroup. A subset i? C AT is called a relative 
{m,n,r, X)-difference set if \K\ = nm, \N\ = n, \R\ = r and 

{nm , b — 0; 
, 6eA\{0}; 
A , beK\N. 

Relative difference set is a generalization of classical difference set and it was introduced in [12] . 
If r = m the difference set is called semiregular. A relative difference set is called splitting if 
K — G X N, i.e. if N has a complement in K. 

This notion is interesting to us because of the following easy observation (see, e.g., [25]). Let G 
and N be arbitrary finite groups and / be a function from G to N. The set {{x, f{x)) \ x S G} is a 
semiregular sphtting (|G|,|A^|,|G|, |G|/|A^|)-difference set in Gx A^ relative to {1} x A' if and only if 
/ is perfect nonlinear. Thus, planar functions correspond to splitting relative (n, n, n, l)-difference 
sets. We extend this result a bit: 

Theorem 19 Let K he an Ahelian group of size n^ having a subgroup N — Z^' x Z^j' x • • • x Z^' 
of size n. The following two statements are equivalent: 

(a) There exists a semiregular {n,n,n, \)-difference set R in K relative to N. 

(b) There exists a fractional planar function f : G N where G = K/N . 

Proof. Suppose we have a relative difference set. Fix any G = "Ldi x x • • • x l^d^ such 
that G = N/K. Let gi,. . . ,gm be elements of K such that they, considered as elements of G, form 
the basis of the latter. Denote by (sii, S2i, . . . , Sm'i) the element digi ^ N , i = 1, . . .m. 

Define an Abelian group K' as follows. Its elements are from the direct product G x N and the 
sum of two elements (xi, a;2, . . . , Xm', 2/1,2/2,..., Um') and {zi, Z2, ■ ■ ■ , Zm',ti,t2, . ■ ■ , tm') is defined as 
(ai,a2, . . . , Om] bi,b2, . . . , 6m') where a^ ^ Xi + z^ and 



/6i\ 
62 


2/2 


+ 


/tl\ 

t2 


+ 


1 Sll S12 
S2I S22 


S\m \ 
S2m 


1 [Xi + Zi> di] \ 
[X2 + Z2> ^2] 


W'/ 


\2/m' / 




\tm' / 




\Sra'\ Sra'2 


Sm'm / 





where [xi + Zi > di] is equal to 1 if the sum of Xi and Zi, taken as integers, exceeds di and is equal 
to otherwise. It is not hard to check that ip : K' K , defined with 

m 

{xi,X2, . . . ,Xm;y) i-> y + ^Xigi, 

1=1 

is an isomorphism. As usually, we identify elements of G with the set {{x, 0) | a; G G} and A^ with 
my)\yeN}. 

Denote by S the m' x m-matrix whose (i, j)-th element is equal to Sij/di. Clearly, ip : K' ^ N 
defined by 

V'(a;,2/) = y + Sx 
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is a morphism. Since i? is a semiregular relative difference set, for any x G K/N we can find a 
unique element G R with projection on K/N equal to x. Define f{x) — ipi^^^irx))- 

Let us prove that / is fractional planar. At first, note that for any x G G: (p^^{rx) = ix,y) 
for some y G N. Then suppose that 51,32,53,54 G G are such that 53 — 51 = 52 ^ 54 7^ and 
51 7^ 54. Denote (a;i,?/i) = ¥'"^(''93 -'''gi) and {x2,y2) = 'i5~H''s2 -''ff4)- We have xi = X2 (because 
53 ~ 51 — 92 — 54) and yi ^ j/2 (because — r^^ 7^ — Vg^). From the definition of ip we have 
(/(53)-/(5i))-(/(52)-/(54))GiV*. 

Suppose conversely that we have a fractional planar function f : G ^ N with the same 
expressions for G and N . Define function {•} that takes a fractional part of every component of 
an element of N . Define also f{x) = {/(x)}. Then ^ yields 

{a + b^c + d)=^ if {a) + f{b) - j{c) - f{d) e N). 

Since the condition on / is invariant under adding a constant to the function, we may assume 
that /(O) = 0. Then /(a + 6) = {/(a) + /(&)}. Now it is easy to deduce that f{x) = {Sx} where 
S is defined in the same way as before for some integers Sij. 

Define K' as in (fT^ and define 

R = {{x]f{x)- Sx) \ xeG}. 
Similar reasoning as before shows that R is semiregular difference set relative to N . ■ 

So, we have proved that if matrix _ff in (l5|) is a Fourier matrix, and all _Da are equivalent (in 
some sense) Fourier matrices, then the existence of a complete system of MUHs in C" is equivalent 
to the existence of a relative (n, n, n, l)-difference set. In fact, a more general result [16] is known: 
the existence of a relative (n, fc,n, A)-difference set implies the existence of k MUHs in C". 

It is proved in [6] that a relative (n, n, n, l)-diffcrence set exists only if n is a prime power. 
Thus, using the approach with / satisfying ([9]) it is not possible to construct a complete system of 
MUBs for any new dimension. It is still not clear what can be said in the case of general I?a and, 
in particular, in the case of / satisfying pi7|) . 

11 Conclusion 

In this paper we have shown that MUBs stand close to sequences with low correlation, similar 
constructions and lower bounds can be used in both. In particular, one of the lower bounds 
(the Welch bounds) gives a nice characterisation of MUBs in terms of orthogonality of a certain 
collection of vectors. It could be interesting to try to use other constructions and bounds from one 
area in another. 

In particular, it is tempting to use criterion of Theorem 0] to other objects. One example 
could be SIC-POVMs, because it is proved in [22 that they also attain the Welch bound for 
k = 2. However, it is not clear what other constraints should be added to a set of vectors to be a 
SIC-POVM (like being a union of bases in the case of MUBs). 

Our criterion seems to have no use for non-complete systems of MUBs. However, in [27] it 
is proposed to use weighted 2-designs consisting of bases for quantum state estimation when no 
complete system of MUBs is known. Our criterion is suitable in this case as well. Let us give some 
details. 



16 



The problem is to find such orthonormal bases Bq, Bi, . . . , of and weights wq,wi, . . . ,Wk 
that are non-negative real numbers that the set {wiX \ x € ? — 0, 1, . . . , /c} attain the Welch 
bound for fc = 2. In particular, one of the main results of [57] can be proved similarly to TheoremfTSl 

Theorem 20 The existence of a differentially 1-uniform function f from an Abelian group G into 
an Abelian group N with \G\ — n and \N\ = m implies the existence of a weighted 2-design in C" 
formed from m + 1 orthonormal bases. 

Another direction of future research is the investigation of L-maximal flat and Hadamard ma- 
trices in order to find new systems of MUBs or to prove that such systems can be reduced to other 
already studied cases. A question of non-homogeneous systems of MUBs also remains open. 
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